fnox.toml

[providers.keychain]
type = "keychain"
service = "fnox"

[secrets]
# Spacelift CLI credentials
SPACELIFT_API_KEY_ID = { provider = "keychain", value = "SPACELIFT_API_KEY_ID" }
SPACELIFT_API_KEY_SECRET = { provider = "keychain", value = "SPACELIFT_API_KEY_SECRET" }
SPACELIFT_API_KEY_ENDPOINT = { provider = "keychain", value = "SPACELIFT_API_KEY_ENDPOINT" }

# GitHub
GHCR_TOKEN = { description = "GitHub Container Registry PAT (write:packages)", provider = "keychain", value = "GHCR_TOKEN" }
GITHUB_TOKEN = { description = "GitHub PAT for API access", provider = "keychain", value = "GITHUB_TOKEN" }

# Cloud providers
HCLOUD_TOKEN = { description = "Hetzner Cloud API token", provider = "keychain", value = "HCLOUD_TOKEN" }
DO_DNS_TOKEN = { description = "DigitalOcean API token for artyom.me DNS", provider = "keychain", value = "DO_DNS_TOKEN" }
DIGITALOCEAN_TOKEN = { description = "DigitalOcean API token (alias for Terraform)", provider = "keychain", value = "DO_DNS_TOKEN" }

# Let's Encrypt
CERTMANAGER_EMAIL = { description = "Let's Encrypt contact email", provider = "keychain", value = "CERTMANAGER_EMAIL" }